@sellable/mcp 0.1.431 → 0.1.433

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -373,7 +373,7 @@ export function getPostFindLeadsScoutRegistry() {
373
373
  codex: 'After confirm_lead_list copies source rows and the initial campaign-table execution slice exists, ask the filter-choice question immediately. Do not spawn anything before that question. After the answer, launch only Message Drafting. The filter-choice answer is the post-import user gate for this single worker; do not ask another question about starting it in step-wise or YOLO mode. The registry lookup is not a launch: after get_post_find_leads_scout_registry, immediately invoke Task/spawn_agent or the host background-agent mechanism before loading filter-leads.md, before saving rubrics, and before treating skip-filters as ready for message review. Both choices route through this kickoff; do not let filters_skipped jump straight from filter-choice to message-generation. If filters are chosen, the parent stays on Filter Rules and drafts/saves rubrics with MCP tools while Message Drafting runs in the background. If filters are skipped, move to Messages/message review only after Message Drafting has started or is ready; update_campaign(currentStep=messages) is not proof of launch. If the named Message Drafting custom agent is unavailable, spawn a generic gpt-5.5 xhigh Message Drafting background agent with the same lean campaign/table basis. When the background worker starts, persist workerDetails.messageDraftBuilder with statusSource "branch", status "branch-running", runId, startedAt, updatedAt, basisToken when known, and basis containing campaignId, selectedLeadListId, workflowTableId, filterChoice, and reviewBatchRowHash or reviewBatchRowIds; workerStatuses.messageDraftBuilder may be "running" as a simple badge only. Never put rich proof under workerStatuses and never use workerStatuses.messageDrafting. If no background-agent tool is callable, start the same full message branch inline before filter drafting or before skip-filter message review, record workerDetails.messageDraftBuilder with statusSource "parent-thread-fallback" and status "fallback-active", and require the same live context, prompt, assets, and validation gate before message review; do not wait until filters are saved and then call the registry.',
374
374
  claude: "After confirm_lead_list copies source rows and the initial campaign-table execution slice exists, ask the filter-choice question immediately. Do not invoke any Task/Agent before that question. After the answer, invoke only Message Drafting. If filters are chosen, parent drafts/saves rubrics with MCP tools while Message Drafting runs, asks filter approval, then joins Message Drafting. If filters are skipped, invoke only Message Drafting and move to Messages/message review.",
375
375
  parentThreadRule: 'Named agents are optional acceleration, but message drafting is not optional. The only normal background worker is Message Drafting. The filter-choice answer is the campaign-scoped go-ahead for this single post-import worker; do not ask another question to start it in step-wise or YOLO mode. If a named agent is unavailable, use a generic gpt-5.5 xhigh Message Drafting background agent. source work and filter work stay in the parent thread with MCP tools. If post-find-leads-message-scout is available, run it as the background Message Draft Builder after the filter-choice answer. The registry lookup is not a launch: get_post_find_leads_scout_registry only identifies the worker, and Message Drafting counts as started only after Task/spawn_agent or the host background-agent tool is invoked, or after the parent begins the same full message branch inline because no background-agent tool is callable. This launch must happen before loading filter-leads.md, save_rubrics, filter approval, or skip-filter message review; currentStep=messages is not proof of launch. If post-find-leads-message-scout is absent, do not customer-surface install status. Do not silently treat message drafting as started; the main thread must either launch the background worker or execute the same message branch from CampaignOffer state, selected source state, workflowTableId, and initial campaign-table execution slice rows. For a spawned worker, record workerDetails.messageDraftBuilder with statusSource branch / status branch-running, runId, startedAt, updatedAt, and basis containing campaignId, selectedLeadListId, workflowTableId, filterChoice, and reviewBatchRowHash or reviewBatchRowIds. workerStatuses.messageDraftBuilder is optional simple badge text only ("running", "ready", "blocked", "idle"); never put runId/statusSource/basis under workerStatuses and never use workerStatuses.messageDrafting. If no background-agent tool is callable, start that same full message branch inline before filter drafting or before skip-filter message review, record workerDetails.messageDraftBuilder with statusSource parent-thread-fallback / status fallback-active then ready, and require the same live context, prompt, assets, and validation gate before message review; do not report that as a background worker failure. If neither branch nor inline fallback can run, return blocked/retry-needed; do not wait until filters are saved and then call the registry. The Message Drafting handoff must be lean. Do not paste copied row counts, brief hashes, review-batch hashes, full reviewBatchRowIds, broad row data, or local debug artifacts into the spawn prompt. Local markdown/json files are not normal-path inputs. The filter-choice question is the first post-import user gate; do not load post-lead registries or filter references before it. Message drafting starts after the filter-choice answer, must load get_subskill_prompt({ subskillName: "generate-messages" }), and must load every required message asset named by generate-messages Mode 0 through get_subskill_asset before drafting. Reference Asset Loading means loading the required pre-draft reference pack before drafting; return blocked/retry-needed if required assets cannot be loaded; load ai-tells.md because it is never optional. The branch or parent-thread fallback loads the full generate-messages prompt and every referenced asset through get_subskill_asset. After generating/revising the candidate and before returning ready, must load get_subskill_prompt({ subskillName: "create-campaign-v2-validation" }) as the final internal validation gate, must read live campaign table state through scoped MCP/product tools, and must reject mismatched selectedLeadListId/workflowTableId/campaign/workspace input. Do not block when filters were chosen but leadScoringRubrics are not yet visible in the branch read; the parent owns save_rubrics and filter approval in parallel, so Message Drafting should return status ready with basisStatus usable_initial when campaign/list/table identity and the non-empty execution slice match. Do not use any alternate, local-artifact, or examples-only message prompt. User copy feedback, message QA, or rewrite requests before approve-message must be routed back to Message Drafting with the current recommendation, lean campaign/table basis, and latest user text; the parent must not rewrite or QA the template from memory and must not call update_campaign_brief before approve-message. The worker validates internally and returns only templateRecommendation, tokenFillRules, renderedGoodSample, status, approveOrReviseRecommendation, validationStatus, outputAt, outputHash, and blocked/retry detail. Do not render renderedFallbackSample, risk notes, or a qaReceipt on the normal happy path. On the filter path, save_rubrics keeps the browser on Filter Rules after save_rubrics so the user can approve the saved criteria; after saved-filter approval, move to Filter Leads with currentStep=apply-icp-rubric whether Message Drafting is ready or still running. Wait there for message approval. Enrichment, filtering, Generate Message cells, sender setup, sequence attach, and launch wait for template approval on the Use Template path. On the skip path, move to Messages/message review after Message Drafting has started or is ready and wait for message approval before enrichment or Settings. Do not render message review from checklist or shortcut instructions; message review requires a messageDraftRecommendation whose basis proves the generate-messages prompt, required message assets, and validation gate ran for the current campaign/table execution slice. Do not automatically rerun Message Drafting after filters/enrichment finish; show the initial draft by default and offer an enriched rewrite only with explicit user opt-in. Handoff and recommendation output are Markdown with labeled fields, not raw JSON.',
376
- prepareMessagesRule: `Default create-campaign stays on the existing reviewBatchLimit:15 first campaign-table execution slice. For plain post-mint fill/load/refill requests, load get_subskill_prompt({ subskillName: "refill-sends-workflow" }), then call resolve_campaign_fill_route({ intent:"plain" }), list_senders, and get_campaign_refill_state for enough candidate campaigns to identify the campaign that most recently had scheduler-owned sends for the relevant sender set before any mutation. Route outcomes are route:"evergreen_horizon", route:"active_campaigns", and route:"ask_create"; stay in the same campaignOfferId/campaignId context after minting. Plain fill is not an alias for fill_campaign_horizon or campaign creation. fill_campaign_horizon is evergreen-only and is not the generic regular-campaign fill path. Campaign creation is allowed only after route:"ask_create" and explicit user selection; it is never the default response to plain fill. Treat "fill up/load sends" as capacity-fill preparation, and treat "refill senders", "fill senders", "max out senders", and "load everyone up" as sender-scoped capacity-fill preparation. For sender-scoped requests with no named senders, --yolo means all eligible healthy senders enrolled in active campaign-backed sequence campaigns in the active workspace; without --yolo, ask which eligible enrolled senders to refill before choosing campaigns or mutating. In non-yolo interactive Codex or Claude Code sessions, the sender/campaign/action approval packet must be asked through request_user_input/AskUserQuestion with exactly Accept and Decline; do not use plain chat approval. The approval question body must show workspace, sender scope, a campaign-by-campaign table, exact ids/caps/dates, side effects, forbidden actions, and stop condition before mutation. Default --yolo horizon is a two-send-day horizon: two sender-local send days, skipping no-send-hour days. For campaign-scoped fill/refill, select the best recent-send campaign and calculate the bounded gap from healthy sender daily capacity minus future scheduler-owned scheduled sends and ready-to-schedule rows, then prepare only that gap. For sender-scoped fill/refill, calculate the bounded gap per eligible sender across active enrolled campaigns, counting future scheduled and ready-to-schedule rows across those campaigns, then choose the best same-sender campaign to fill each sender gap: prefer recent/future scheduler-owned sends for that sender, then strongest recent result evidence, then source health. Do not stop after filling only one sender when the request was sender-scoped. Use the refill workflow to decide whether to enrich/prep more rows in that same recent-send/best-result campaign, add/import more rows to that same campaign/source path, use a different existing campaign only when the selected same-sender lane is blocked/exhausted/already loaded while the sender still has a gap, or ask what to create. Do not create warm-post-engager side campaigns. Surface sender-health blockers separately from prepared/approved/scheduled counts. User-facing refill decisions must be campaign-name-first and sender-name-first, with ids as proof/execution targets only. For already-running regular campaigns that need Signal Discovery source replenishment, use the guarded currentStep clear with clearCurrentStepIfMatches:"running", campaign-scoped provider prompt/search/select, and import_leads with the existing sourceLeadListId when a newly approved selected-post scrape would otherwise return reusedExistingSourceList. After confirm_lead_list copies rows into an existing table, avoid fixed maxRowsToCheck:100; if confirm_lead_list returns USER_ADDED_ROWS_LIMIT_EXCEEDED, create a bounded same-source split from selectedLeadListId with get_rows_minimal/load_csv_linkedin_leads, confirm that smaller source list into the same campaign, and operate on the reviewBatch first; inspect reviewBatch/table selectors or use adaptive/wider bounded prep so appended rows are included. Do not interpret checkedRows as enriched rows; it is only the table cursor. Prepared, approved, and ready_to_schedule rows are intermediate states; never call them scheduled unless a re-read proves scheduler-owned scheduled cells with non-null scheduledFor. Before source import, prep, approval, or selected paused campaign start, require exact visible approval or --yolo packet auto-accept and a fresh get_campaign_refill_state reread; stop if freshness.stateHash or exact ids changed. For "approve X messages", use approvalMode:approve only when explicitly requested. For "schedule X sends" or "fill sender sends", approve only when explicitly requested, then re-read campaign/table scheduled counts; if scheduler-owned scheduledFor cells are not present, report prepared/approved/ready - awaiting scheduler instead of success. start_campaign is allowed in refill only for exact selected PAUSED, dashboard-active, campaign-backed sequence targets named in the bounded packet, and the packet must state that starting can let the product scheduler schedule/send approved eligible sequence actions. Never start unrelated, archived, completed, draft, direct, or non-selected campaigns, never broad approve-all, and never use direct scheduler writes. campaignId is CampaignOffer.id. If the user asks to stop preparation, the target is wrong, or status shows the wrong campaign/table, use cancel_campaign_message_preparation only for the exact active job. Low-level selectors are diagnostics and recovery only for this lane.`,
376
+ prepareMessagesRule: `Default create-campaign stays on the existing reviewBatchLimit:15 first campaign-table execution slice. For plain post-mint fill/load/refill requests, load get_subskill_prompt({ subskillName: "refill-sends-workflow" }), then call resolve_campaign_fill_route({ intent:"plain" }), list_senders, and get_campaign_refill_state for enough candidate campaigns to identify the campaign that most recently had scheduler-owned sends for the relevant sender set before any mutation. Route outcomes are route:"evergreen_horizon", route:"active_campaigns", and route:"ask_create"; stay in the same campaignOfferId/campaignId context after minting. Plain fill is not an alias for fill_campaign_horizon or campaign creation. fill_campaign_horizon is evergreen-only and is not the generic regular-campaign fill path. Campaign creation is allowed only after route:"ask_create" and explicit user selection; it is never the default response to plain fill. Treat "fill up/load sends" as capacity-fill preparation, and treat "refill senders", "fill senders", "max out senders", and "load everyone up" as sender-scoped capacity-fill preparation. For sender-scoped requests with no named senders, --yolo means all eligible healthy senders enrolled in active campaign-backed sequence campaigns in the active workspace; without --yolo, ask which eligible enrolled senders to refill before choosing campaigns or mutating. In non-yolo interactive Codex or Claude Code sessions, the sender/campaign/action approval packet must be asked through request_user_input/AskUserQuestion with exactly Accept and Decline; do not use plain chat approval. The approval question body must show workspace, sender scope, a campaign-by-campaign table, exact ids/caps/dates, side effects, forbidden actions, and stop condition before mutation. Default --yolo horizon is a two-send-day horizon: two sender-local send days, skipping no-send-hour days. For campaign-scoped fill/refill, select the best recent-send campaign and calculate the bounded gap from healthy sender daily capacity minus future scheduler-owned scheduled sends and ready-to-schedule rows, then prepare only that gap. For sender-scoped fill/refill, calculate the bounded gap per eligible sender across active enrolled campaigns, counting future scheduled and ready-to-schedule rows across those campaigns, then choose the best same-sender campaign to fill each sender gap: prefer recent/future scheduler-owned sends for that sender, then strongest recent result evidence, then source health. Do not stop after filling only one sender when the request was sender-scoped. Use the refill workflow to decide whether to enrich/prep more rows in that same recent-send/best-result campaign, add/import more rows to that same campaign/source path, use a different existing campaign only when the selected same-sender lane is blocked/exhausted/already loaded while the sender still has a gap, or ask what to create. Do not create warm-post-engager side campaigns. Surface sender-health blockers separately from prepared/approved/scheduled counts. User-facing refill decisions must be campaign-name-first and sender-name-first, with ids as proof/execution targets only. For already-running regular campaigns that need Signal Discovery source replenishment, use the guarded currentStep clear with clearCurrentStepIfMatches:"running", campaign-scoped provider prompt/search/select, and import_leads with the existing sourceLeadListId when a newly approved selected-post scrape would otherwise return reusedExistingSourceList. After confirm_lead_list copies rows into an existing table, avoid fixed maxRowsToCheck:100; if confirm_lead_list returns USER_ADDED_ROWS_LIMIT_EXCEEDED, create a bounded same-source split from selectedLeadListId with get_rows_minimal/load_csv_linkedin_leads, confirm that smaller source list into the same campaign, and operate on the reviewBatch first; inspect reviewBatch/table selectors or use adaptive/wider bounded prep so appended rows are included. Do not interpret checkedRows as enriched rows; it is only the table cursor. Prepared, approved, and ready_to_schedule rows are intermediate states; never call them scheduled unless a re-read proves scheduler-owned scheduled cells with non-null scheduledFor. Before source import, prep, or approval, require exact visible approval and a fresh get_campaign_refill_state reread; stop if freshness.stateHash or exact ids changed. For "approve X messages", use approvalMode:approve only when explicitly requested, but still do not launch. For "schedule X sends" or "fill sender sends", approve only when explicitly requested, then re-read campaign/table scheduled counts; if scheduler-owned scheduledFor cells are not present, report prepared/approved/ready - awaiting scheduler instead of success. Do not call start_campaign as part of fill/schedule horizon. Do not call start_campaign as part of refill sends. Launch/start is a separate explicit human action after the operator intentionally wants sends to go out, and it must still verify that the bounded cohort is the only approved cohort and must not broad approve-all. campaignId is CampaignOffer.id. If the user asks to stop preparation, the target is wrong, or status shows the wrong campaign/table, use cancel_campaign_message_preparation only for the exact active job. Low-level selectors are diagnostics and recovery only for this lane. start_campaign remains forbidden until explicit launch/start approval outside refill sends.`,
377
377
  },
378
378
  };
379
379
  }
@@ -151,13 +151,13 @@ export function refillSendsCommand(input = {}) {
151
151
  "Fresh reread get_campaign_refill_state immediately before any import, prep, approval, or horizon-fill mutation.",
152
152
  ],
153
153
  approvalContract: yolo
154
- ? "Auto-accept only the rendered bounded refill packet after fresh reread. This may include start_campaign only for exact selected PAUSED campaign-backed sequence refill targets named in the packet. Stop if sender set, route, ids, caps, dates, blockers, or side-effect class drift."
154
+ ? "Auto-accept only the rendered bounded refill packet after fresh reread. Stop if sender set, route, ids, caps, dates, blockers, or side-effect class drift."
155
155
  : hasSenderSelectors
156
156
  ? "Ask the final Accept/Decline structured approval question before mutation, including workspace, sender scope, campaign table, exact ids, caps/dates, side effects, forbidden actions, and stop condition."
157
157
  : "Ask which eligible enrolled senders to refill first, then ask the final Accept/Decline structured approval question before mutation.",
158
158
  forbiddenActions: [
159
- "start_campaign outside an exact selected PAUSED campaign-backed refill packet",
160
- "manual launch/send or direct sending outside product scheduler side effects",
159
+ "start_campaign",
160
+ "launch or send",
161
161
  "archive or delete cleanup",
162
162
  "direct scheduler writes",
163
163
  "sender reassignment",
@@ -1,7 +1,6 @@
1
1
  type SetupEvergreenCampaignsInput = {
2
2
  mode?: "plan" | "verify";
3
3
  depth?: "structure_only" | "customer_visible";
4
- handoffMode?: "create_campaign_goals";
5
4
  yolo?: boolean;
6
5
  allConnectedSenders?: boolean;
7
6
  selectedSenderIds?: string[];
@@ -32,11 +31,6 @@ export declare const setupEvergreenCampaignsToolDefinitions: {
32
31
  enum: string[];
33
32
  description: string;
34
33
  };
35
- handoffMode: {
36
- type: string;
37
- enum: string[];
38
- description: string;
39
- };
40
34
  yolo: {
41
35
  type: string;
42
36
  description: string;
@@ -20,11 +20,6 @@ export const setupEvergreenCampaignsToolDefinitions = [
20
20
  enum: ["structure_only", "customer_visible"],
21
21
  description: 'Use "customer_visible" for full setup proof or "structure_only" when only ensuring lane shells/config.',
22
22
  },
23
- handoffMode: {
24
- type: "string",
25
- enum: ["create_campaign_goals"],
26
- description: 'plan mode only. When set to "create_campaign_goals", returns concise per-lane `$sellable:create-campaign` goal prompts and required inputs for testing simplified worker handoffs without changing verification behavior.',
27
- },
28
23
  yolo: {
29
24
  type: "boolean",
30
25
  description: "plan mode only. Requests auto-executable lane packets when state is safe; never authorizes cleanup, launch, scheduling, sending, or ambiguous target choice.",
@@ -93,7 +88,6 @@ export function setupEvergreenCampaigns(input) {
93
88
  mode: input.mode,
94
89
  yolo: input.mode === "verify" ? undefined : input.yolo,
95
90
  depth: input.depth,
96
- handoffMode: input.mode === "verify" ? undefined : input.handoffMode,
97
91
  allConnectedSenders: input.allConnectedSenders,
98
92
  selectedSenderIds: input.selectedSenderIds,
99
93
  postEngagerSenderIds: input.postEngagerSenderIds,
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@sellable/mcp",
3
- "version": "0.1.431",
3
+ "version": "0.1.433",
4
4
  "type": "module",
5
5
  "description": "Sellable MCP server for Claude Code and Codex campaign workflows",
6
6
  "main": "dist/index.js",
@@ -56,10 +56,10 @@ this felt too on the nose to ignore"` shapes only when the source was an
56
56
  explicit lead-magnet comment, reply, or opt-in.
57
57
 
58
58
  Shared evergreen exception: for Shared Signal Discovery and other shared
59
- evergreen lanes, the weak-signal permissioned bridge above is still a tell.
60
- Reject `hope this is relevant`, `might be interested`, and `saw you in a few
61
- conversations` as openers; require a concrete signal/problem bridge or omit the
62
- source line.
59
+ evergreen lanes, `hope this is relevant` is allowed when it stays topic-level
60
+ and does not pretend engagement. Reject `might be interested` and `saw you in a
61
+ few conversations` as openers; require a concrete signal/problem bridge or omit
62
+ the source line.
63
63
 
64
64
  **Severity:** REJECT
65
65
 
@@ -203,7 +203,7 @@ Why it works:
203
203
  **Proof ranks used:** rank 1 (mechanism - 1,000+ conditions from one blood
204
204
  draw), rank 3 (risk before claims).
205
205
 
206
- Do not use the Superpower weak-signal hedge pattern for Shared Evergreen Signal Discovery. Shared evergreen lanes are reused across multiple senders and must not open with `hope this is relevant`, `might be interested`, or `saw you in a few conversations`. Use the safe pattern below instead.
206
+ Do not use the Superpower weak-signal hedge pattern for Shared Evergreen Signal Discovery when it opens with `might be interested` or `saw you in a few conversations`. `Hope this is relevant` is allowed when it stays topic-level and does not pretend engagement. Use the safe pattern below when a concrete signal/problem bridge is stronger.
207
207
 
208
208
  ### Shared Evergreen Signal Discovery Safe Pattern
209
209
 
@@ -222,7 +222,7 @@ Curious if LinkedIn outbound is a channel you're trying to make more reliable th
222
222
 
223
223
  Why it works:
224
224
 
225
- - no low-confidence relevance hedge
225
+ - no blocked low-confidence relevance hedge
226
226
  - no `I'm building` or founder-only first person
227
227
  - no internal workflow vocabulary such as Codex, MCP, agent workflows, workflow
228
228
  table, lead source, or signal discovery
@@ -74,7 +74,7 @@ Revise or reject the sample when any of these happen.
74
74
  - **actions are implied, not stated** — e.g. "runs that chain as AI agents" when a clearer version would name the specific actions (verb + object, one per line)
75
75
  - **category-level opener used when a per-lead signal exists** — if `lead-sample.json` carries any per-lead signal (post, hire, visible tool, topic engagement), the opener must reference it. Category-level openers of shape `"Most [category] teams still do X by hand"` are only acceptable when zero per-lead signal is in the sample. When a category-level opener is used as fallback, Findings must flag it explicitly
76
76
  - **mind-reading from engagement signals** — a topic engagement, post, public activity, role, company, or hiring trigger does not prove buyer intent. Reject phrases like `"AI-GTM stack is clearly on your mind"`, `"you're clearly focused on..."`, `"obviously relevant"`, or `"already thinking about..."` unless that exact priority is explicitly present in `lead-sample.json`. Translate to low-certainty buyer context or omit the signal from copy.
77
- - **source-y signal narration** — reject `"saw you on..."`, `"saw you engaging with..."`, `"you commented on..."`, `"your LinkedIn activity..."`, `"you might not remember the thread..."`, `"found you through [source] and your role looked close..."`, or any line that makes the recipient feel watched unless the chosen archived motion is intentionally self-aware about the signal. For sender-owned LinkedIn post sources, a light first-person acknowledgment is allowed when row data proves a reaction/comment: `"appreciate you showing some love on my post about [topic]"` or `"thanks for showing support on my [topic] post"`. Do not name a comment unless comment text is present. Follow the acknowledgment with a soft relevance bridge before broad pain/product copy, e.g. `"figured this might be relevant if LinkedIn is becoming more of a GTM channel for [company]"`. For third-party LinkedIn-post-sourced campaigns, a topic-level bridge is allowed when it explains why the note exists and stays apologetically uncertain: `"saw you in a few conversations about [topic], so may be off, but this seemed relevant."`, `"saw you in a few conversations around [topic], so hope this is relevant."`, or `"found you in a thread about [topic], so may be off, but this seemed relevant."` Shared evergreen signal exception: these hedges are blocked for Shared Signal Discovery and other shared evergreen lanes; use a concrete signal/problem bridge or omit the source line. Reserve `"raise your hand"` language for explicit lead-magnet comments, replies, or opt-ins. Translate the signal into natural buyer context or omit it.
77
+ - **source-y signal narration** — reject `"saw you on..."`, `"saw you engaging with..."`, `"you commented on..."`, `"your LinkedIn activity..."`, `"you might not remember the thread..."`, `"found you through [source] and your role looked close..."`, or any line that makes the recipient feel watched unless the chosen archived motion is intentionally self-aware about the signal. For sender-owned LinkedIn post sources, a light first-person acknowledgment is allowed when row data proves a reaction/comment: `"appreciate you showing some love on my post about [topic]"` or `"thanks for showing support on my [topic] post"`. Do not name a comment unless comment text is present. Follow the acknowledgment with a soft relevance bridge before broad pain/product copy, e.g. `"figured this might be relevant if LinkedIn is becoming more of a GTM channel for [company]"`. For third-party LinkedIn-post-sourced campaigns, a topic-level bridge is allowed when it explains why the note exists and stays apologetically uncertain: `"saw you in a few conversations about [topic], so may be off, but this seemed relevant."`, `"saw you in a few conversations around [topic], so hope this is relevant."`, or `"found you in a thread about [topic], so may be off, but this seemed relevant."` Shared evergreen signal exception: `hope this is relevant` is allowed when it stays topic-level and avoids false warm engagement, but `might be interested` and `saw you in a few conversations` are blocked for Shared Signal Discovery and other shared evergreen lanes; use a concrete signal/problem bridge or omit the source line. Reserve `"raise your hand"` language for explicit lead-magnet comments, replies, or opt-ins. Translate the signal into natural buyer context or omit it.
78
78
  - **sender-owned source rendered as third-party** — hard fail when the source post is sender-owned and the draft says `"found you in a thread"`, `"saw you in a thread"`, `"saw you in conversations"`, or `"saw you in a few conversations"` as if the post were third-party. For sender-owned sources, the copy must either use a light first-person acknowledgment plus a soft relevance bridge, or omit the source line. If multiple senders may send the campaign, or the final sender/source-owner match is ambiguous, do not assume a specific `my post` voice or name a specific sender; omit the sender-owned source line until row-level sender ownership is proven. Neutral low-certainty thread/source language is only for truly third-party sources.
79
79
  - **fake line-to-line continuity** — reject line stacks where the source acknowledgment, relevance bridge, product line, and CTA do not actually build on each other. Each line must make the next line feel earned. If two adjacent lines could be swapped, deleted, or joined with `"anyway"` without changing the meaning, the transition is fake. In sender-owned post campaigns, the chain should be: support on my post -> why this topic may matter for the company -> what the product/problem does about that same topic -> low-friction next step.
80
80
  - **assumptive title-fit opener** — reject `"Your [role] role at [company] looked close to this problem"` or `"looked close to this outbound campaign problem"`. This asserts fit from title/company. Keep the apologetic uncertainty instead: `"may be off, but if [workflow] is relevant to what you're working on..."`.
@@ -1220,7 +1220,7 @@ Message, and verify current-revision sample messages before final completion.
1220
1220
  Short form: Do not pass the warm template into Shared Signal Discovery or Shared Cold Fallback.
1221
1221
  Short form: Shared lanes must reject generic product-summary samples.
1222
1222
  Short form: Shared lanes must reject three nearly identical samples.
1223
- Short form: Shared lanes must reject low-confidence relevance hedges.
1223
+ Short form: Shared lanes must reject low-confidence relevance hedges except "hope this is relevant".
1224
1224
  Short form: Shared lanes must reject internal workflow vocabulary.
1225
1225
  Short form: revise or rerun the packaged create-campaign/generate-messages path.
1226
1226
  - **Post Engagers** first-message style: short, casual, references the
@@ -1259,9 +1259,11 @@ Message, and verify current-revision sample messages before final completion.
1259
1259
  product summaries, or repeated structure are bad. If the first generated
1260
1260
  batch violates these rules, rerun, but record that as a repaired UAT path
1261
1261
  rather than the desired zero-shot path.
1262
- Do not use low-confidence relevance hedges such as "hope this is
1263
- relevant" in Shared Signal Discovery samples. Translate source/tool terms
1264
- into prospect-facing business language; do not put internal workflow
1262
+ Do not use low-confidence relevance hedges such as "might be interested"
1263
+ or "saw you in a few conversations" in Shared Signal Discovery samples.
1264
+ "Hope this is relevant" is allowed when it stays topic-level and does not
1265
+ pretend engagement. Translate source/tool terms into prospect-facing
1266
+ business language; do not put internal workflow
1265
1267
  vocabulary such as "Codex-style workflow", "MCP", "agent workflows",
1266
1268
  "Claude Code", or "Claude-style agent workflows" in customer-facing
1267
1269
  message one. Also avoid generic product-process nouns such as "dashboard",
@@ -1273,7 +1275,7 @@ Message, and verify current-revision sample messages before final completion.
1273
1275
  Short form: Shared Signal Discovery uses no self-intro such as "I'm building Sellable".
1274
1276
  Short form: Shared Signal Discovery uses no self-intro such as "We're building Sellable".
1275
1277
  Short form: Shared Signal Discovery uses no "I've put together".
1276
- Short form: no low-confidence relevance hedge such as "hope this is relevant".
1278
+ Short form: no low-confidence relevance hedge such as "might be interested" or "saw you in a few conversations"; "hope this is relevant" is allowed.
1277
1279
  Short form: no internal workflow vocabulary such as "Codex-style workflow", "MCP", "agent workflows", "Claude Code", or "Claude-style agent workflows".
1278
1280
  - **Shared Cold Fallback** first-message style: cold, direct, and cohesive.
1279
1281
  It must not pretend there was engagement, must not say "saw you pop up",
@@ -1289,11 +1291,13 @@ Message, and verify current-revision sample messages before final completion.
1289
1291
  Sellable/Codex/Claude-Code feature summary
1290
1292
  across prospects. This is a single-message cold path unless the approved
1291
1293
  create-campaign message workflow proves a better delivery format.
1292
- Do not open with "hope this is relevant" or a similar low-confidence
1293
- relevance hedge. Do not use a repeated product-definition paragraph such
1294
- as "Sellable is a GTM system" across samples; every reviewed cold sample
1295
- should be specific enough to the role, company, or problem that the three
1296
- sample messages do not share the same body skeleton.
1294
+ "Hope this is relevant" is allowed when it does not pretend engagement and
1295
+ immediately ties to a concrete buyer problem. Do not open with "might be
1296
+ interested" or "saw you in a few conversations". Do not use a repeated
1297
+ product-definition paragraph such as "Sellable is a GTM system" across
1298
+ samples; every reviewed cold sample should be specific enough to the role,
1299
+ company, or problem that the three sample messages do not share the same
1300
+ body skeleton.
1297
1301
  Do not use mechanical Sellable process language such as "campaign idea into
1298
1302
  prospects, filters, messages, and sequence setup", "sequence-prospects",
1299
1303
  "dashboard overhead", "campaign map", "send-ready copy", or "reviewed
@@ -1310,7 +1314,7 @@ Message, and verify current-revision sample messages before final completion.
1310
1314
  Short form: Shared Cold Fallback uses no "I've put together".
1311
1315
  Short form: Shared Cold Fallback uses no opt-out shrug such as "If this isn't relevant, ignore me".
1312
1316
  Short form: Shared Cold Fallback uses no product-stack dump.
1313
- Short form: no low-confidence relevance hedge such as "hope this is relevant".
1317
+ Short form: "hope this is relevant" is allowed; "might be interested" and "saw you in a few conversations" are not.
1314
1318
  Short form: no repeated product-definition paragraph such as "Sellable is a GTM system".
1315
1319
  - Customer-visible evergreen lanes must enable ICP filtering before Message
1316
1320
  Drafting. This applies to Post Engagers, Shared Signal Discovery, and
@@ -1399,9 +1403,10 @@ Message, and verify current-revision sample messages before final completion.
1399
1403
  or a product-stack dump that repeats the same
1400
1404
  Sellable/Codex/Claude-Code feature summary across prospects. For all
1401
1405
  shared lanes, reject generic product-summary samples, repeated
1402
- near-identical samples, low-confidence relevance hedges such as "hope this
1403
- is relevant", internal workflow vocabulary, any sample with non-empty
1404
- `issues`, and any preserved Post Engagers opener; revise or rerun the packaged
1406
+ near-identical samples, low-confidence relevance hedges such as "might be
1407
+ interested" or "saw you in a few conversations", internal workflow
1408
+ vocabulary, any sample with non-empty `issues`, and any preserved Post
1409
+ Engagers opener; revise or rerun the packaged
1405
1410
  create-campaign/generate-messages path before reporting completion. Do not
1406
1411
  approve or final-report samples with `verdict:"passed"` and non-empty
1407
1412
  `issues`.
@@ -269,7 +269,7 @@ must be safer than the legacy weak-signal examples. These lanes are reused by
269
269
  multiple senders, so the first line cannot sound like a scraped-activity excuse
270
270
  or a founder self-intro.
271
271
 
272
- - `hope this is relevant`, `might be interested`, and `saw you in a few conversations` are blocked openers for shared evergreen lanes.
272
+ - `might be interested` and `saw you in a few conversations` are blocked openers for shared evergreen lanes. `hope this is relevant` is allowed when it stays topic-level and does not pretend engagement.
273
273
  - do not write first-person singular founder language such as `I'm building`,
274
274
  `I've mapped`, `my company`, or `my team` unless exactly one sender can
275
275
  credibly say it and the lane is not shared.
@@ -280,8 +280,8 @@ or a founder self-intro.
280
280
  `source`, `sequence`, `send-ready copy`, or `reviewed prospect list` as
281
281
  buyer-facing explanation in shared evergreen samples unless the buyer's own
282
282
  company/product category uses that exact word and the line still sounds human.
283
- - Write a concrete signal/problem bridge instead of a relevance hedge. Good
284
- shapes are `the AI-assisted GTM conversations keep coming back to [buyer
283
+ - Write a concrete signal/problem bridge instead of a rejected relevance hedge.
284
+ Good shapes are `the AI-assisted GTM conversations keep coming back to [buyer
285
285
  problem]`, `teams trying to turn LinkedIn signal into pipeline usually hit
286
286
  [problem]`, or `when [observable business moment] is live, [buyer workflow]
287
287
  gets harder to run consistently`.
@@ -290,10 +290,11 @@ or a founder self-intro.
290
290
  - Shared evergreen lanes must pass this gate before `confirmed`, before saving a
291
291
  reusable template, and before any route-proof approval.
292
292
 
293
- Short form: shared evergreen copy cannot use `hope this is relevant`.
293
+ Short form: shared evergreen copy may use `hope this is relevant` when it avoids false engagement claims.
294
294
  Short form: shared evergreen copy cannot use `might be interested`.
295
+ Short form: shared evergreen copy cannot use `saw you in a few conversations`.
295
296
  Short form: shared evergreen copy cannot use `I'm building`.
296
- Short form: write a concrete signal/problem bridge instead of a relevance hedge.
297
+ Short form: write a concrete signal/problem bridge instead of a rejected relevance hedge.
297
298
 
298
299
  ### Rich Personalization Contract
299
300
 
@@ -313,12 +314,13 @@ conditional good/bad fill reference.
313
314
  `[PERSONALIZATION_LINE — Intent: write one short sentence that anchors the
314
315
  note to why this might matter now. DO: connect one observable role/company/
315
316
  activity signal to the buyer problem or offer with a permissioned bridge. For
316
- shared evergreen lanes, do not use `hope this is relevant`, `might be
317
- interested`, or `saw you in a few conversations`; use a concrete
318
- signal/problem bridge instead. For non-evergreen weak-signal campaigns only,
319
- legacy low-certainty language like "hope this is relevant if..." or "so may be
320
- off, but this seemed relevant" can be considered when the source is otherwise
321
- awkward. DON'T: recap their resume, list companies, compliment their
317
+ shared evergreen lanes, do not use `might be interested` or `saw you in a few
318
+ conversations`; `hope this is relevant` is allowed when it stays topic-level and
319
+ avoids false engagement claims. Use a concrete signal/problem bridge instead of
320
+ rejected relevance hedges. Low-certainty language like "hope this is relevant
321
+ if..." or "so may be off, but this seemed relevant" can be considered when the
322
+ source is otherwise awkward. DON'T: recap their resume, list companies,
323
+ compliment their
322
324
  background, name a product their company sells, use source-citation phrasing, or
323
325
  use generic nouns like "your work".
324
326
  FALLBACK: if unsupported, omit the entire line.]`
@@ -479,7 +481,7 @@ artifact.**
479
481
 
480
482
  Safer shapes:
481
483
 
482
- - `hope this is relevant if {{signal_topic}} is part of the plan` for non-evergreen weak-signal campaigns only
484
+ - `hope this is relevant if {{signal_topic}} is part of the plan`
483
485
  - `saw you might be interested in {{signal_topic}}, so hope this is relevant` for non-evergreen weak-signal campaigns only
484
486
  - `saw you in a few conversations around {{signal_topic}}, so hope this is relevant` for non-evergreen weak-signal campaigns only
485
487
  - `saw you in a few conversations about {{signal_topic}}, so may be off, but this seemed relevant`
@@ -550,17 +552,20 @@ artifact.**
550
552
  Signal Discovery. `saw you commented on {{post_context}}` and `your LinkedIn
551
553
  activity around...` are not acceptable. Reserve `raise your hand` phrasing
552
554
  for explicit lead-magnet comments, replies, or opt-ins. For ordinary shared
553
- evergreen thread discovery, either translate the topic into a concrete
554
- buyer/problem bridge or omit the source line.
555
+ evergreen thread discovery, either use `hope this is relevant` without
556
+ source-mechanics narration, translate the topic into a concrete buyer/problem
557
+ bridge, or omit the source line.
555
558
 
556
559
  Keep the apologetic nature, but aim it at uncertainty, not surveillance.
557
560
  Good for non-evergreen weak-signal campaigns: `saw you in a few
558
561
  conversations about outbound, so may be off, but this seemed relevant`, `may
559
562
  be off, but if outbound is relevant to what you're working on...`, or `hope
560
- this is relevant if...`. For shared evergreen lanes, these hedges are not
561
- enough; use a concrete signal/problem bridge or omit the source line. Bad:
562
- `your role at {{company}} looked close...`, because it asserts fit from a
563
- title and tells the buyer about themselves.
563
+ this is relevant if...`. For shared evergreen lanes, `hope this is relevant`
564
+ is allowed when it stays topic-level and avoids false engagement claims, but
565
+ `might be interested` and `saw you in a few conversations` are not enough;
566
+ use a concrete signal/problem bridge or omit the source line. Bad: `your role
567
+ at {{company}} looked close...`, because it asserts fit from a title and
568
+ tells the buyer about themselves.
564
569
 
565
570
  Block wordier source narration such as `you might not remember the thread,
566
571
  but I found you through a {{signal_topic}} discussion and your
@@ -1558,9 +1563,9 @@ Before `confirmed`, run the selected winner against these gates:
1558
1563
  `hope this is relevant if...`, `saw you might be interested in...`,
1559
1564
  `saw you in a few conversations around...`, `figured this might matter if...`,
1560
1565
  or `if you've ever wanted...`. Exception: for Shared Signal Discovery and
1561
- other shared evergreen lanes, `hope this is relevant`, `might be interested`,
1562
- and `saw you in a few conversations` are blocked; use a concrete
1563
- signal/problem bridge or omit the source line.
1566
+ other shared evergreen lanes, `might be interested` and `saw you in a few
1567
+ conversations` are blocked; `hope this is relevant` is allowed when it stays
1568
+ topic-level and avoids false engagement claims.
1564
1569
  - **Buyer-first opener:** after the greeting, the first substantive line
1565
1570
  should usually enter the buyer's world: a real signal, current-state
1566
1571
  pain, buyer-owned priority, or useful artifact. Sender-origin can come
@@ -1862,9 +1867,10 @@ about`, or `clearly relevant` are BLOCKED. Source-y phrases such as
1862
1867
  in a few conversations around [topic], so hope this is relevant`, `found you
1863
1868
  in a few conversations about [topic], so may be off, but this seemed
1864
1869
  relevant`, `figured this might matter if [workflow] is live at [company]`, or
1865
- a similarly natural line. For shared evergreen lanes, skip the `hope this is
1866
- relevant` / `might be interested` / `saw you in a few conversations` versions
1867
- and use the concrete bridge version. Longer source-recap forms such as `you
1870
+ a similarly natural line. For shared evergreen lanes, skip the `might be
1871
+ interested` / `saw you in a few conversations` versions and use `hope this is
1872
+ relevant` only when it stays topic-level and avoids false engagement claims,
1873
+ or use the concrete bridge version. Longer source-recap forms such as `you
1868
1874
  might not remember the thread,
1869
1875
  but I found you through a [topic] discussion...` are BLOCKED; they narrate
1870
1876
  the scrape path instead of creating buyer relevance.
@@ -2010,7 +2016,7 @@ matters to the buyer, why this might be relevant, or the operator-reality that
2010
2016
  led to it. Acceptable openers:
2011
2017
 
2012
2018
  - `Hey {{first_name}}, [one plain sentence about what we built].`
2013
- - `Hey {{first_name}}, hope this is relevant if [buyer context] is still on your plate.` Not for shared evergreen lanes.
2019
+ - `Hey {{first_name}}, hope this is relevant if [buyer context] is still on your plate.`
2014
2020
  - `Hey {{first_name}}, saw you might be interested in [topic], so hope this is relevant.` Not for shared evergreen lanes.
2015
2021
  - `Hey {{first_name}}, saw you in a few conversations around [topic], so hope this is relevant.` Not for shared evergreen lanes.
2016
2022
  - `Hey {{first_name}}, found you in a thread about [topic], so may be off, but this seemed relevant.`
@@ -2273,7 +2279,7 @@ Rules:
2273
2279
  - if `lead-sample.json` carries **any** per-lead signal for this lead — a recent post, a recent hire, a visible tool in the headline, a topic engagement, a public initiative — the **message must reference it specifically**. Category-level copy is rejected.
2274
2280
  - default placement is **Block 3**, not Block 1. Keep Block 1 substance-first unless the archived motion clearly earns a signal-led opener without falling into source-citation / talk-at phrasing.
2275
2281
  - acceptable signal use by default:
2276
- - `"Hope this is relevant if [topic] is part of the plan."` Non-evergreen weak-signal only; blocked for shared evergreen lanes.
2282
+ - `"Hope this is relevant if [topic] is part of the plan."`
2277
2283
  - `"Saw you might be interested in [topic], so hope this is relevant."` Non-evergreen weak-signal only; blocked for shared evergreen lanes.
2278
2284
  - `"Saw you in a few conversations around [topic], so hope this is relevant."` Non-evergreen weak-signal only; blocked for shared evergreen lanes.
2279
2285
  - `"Saw you in a few conversations about [topic], so may be off, but this seemed relevant."`
@@ -2293,8 +2299,11 @@ Rules:
2293
2299
  - `"Saw you raise your hand for [topic], so figured this was worth sending."`
2294
2300
  - `"Figured this was worth sending."`
2295
2301
  - signal-led opener shape is a **special case**, not the default. Use it only when the archived motion truly depends on it and the line can stay natural. For LinkedIn-post-sourced campaigns, prefer `"saw you in a few conversations around [topic], so hope this is relevant"` or `"found you in a thread about [topic], so may be off, but this seemed relevant"` when referencing the source makes the outreach feel less random. Avoid activity-log phrasing such as `"you commented on..."`, `"you reacted to..."`, or `"your LinkedIn activity..."` unless the approved motion is the deliberately self-aware raise-hand line for an explicit lead-magnet comment, reply, or opt-in.
2296
- - For Shared Evergreen Signal Discovery, do not use the weak signal-led opener
2297
- shapes above. Translate the source into a concrete problem bridge, e.g.
2302
+ - For Shared Evergreen Signal Discovery, do not use the `might be interested` or
2303
+ `saw you in a few conversations` weak signal-led opener shapes above. `Hope
2304
+ this is relevant` is allowed when it stays topic-level and avoids false
2305
+ engagement claims. Translate the source into a concrete problem bridge when
2306
+ that is stronger, e.g.
2298
2307
  `"The AI-assisted GTM conversations keep coming back to one problem: turning
2299
2308
  good LinkedIn signal into review-ready pipeline without another dashboard."`
2300
2309
  Then connect the product in buyer language.
@@ -2306,9 +2315,11 @@ Rules:
2306
2315
  this is relevant`, `saw you in a few conversations around [topic], so hope this
2307
2316
  is relevant`, `saw you in a few conversations about [topic], so may be off,
2308
2317
  but this seemed relevant`, or `found you in a thread about [topic], so may be
2309
- off, but this seemed relevant`. For shared evergreen lanes, those weak signal
2310
- bridges are blocked; use a concrete signal/problem bridge instead. Use the
2311
- self-aware raise-hand shapes only when
2318
+ off, but this seemed relevant`. For shared evergreen lanes, `might be
2319
+ interested` and `saw you in a few conversations` weak signal bridges are
2320
+ blocked; `hope this is relevant` is allowed when it stays topic-level and avoids
2321
+ false engagement claims. Use a concrete signal/problem bridge when it is
2322
+ stronger. Use the self-aware raise-hand shapes only when
2312
2323
  the source was an explicit lead-magnet comment, reply, or opt-in: `saw you raise
2313
2324
  your hand for [topic], so figured this was (hopefully) worth sending` or `saw you
2314
2325
  raise your hand for [topic] (creepy to reach out based on that, i know) - but
@@ -24,7 +24,6 @@ allowed-tools:
24
24
  - mcp__sellable__get_provider_prompt
25
25
  - mcp__sellable__get_campaign_message_preparation_status
26
26
  - mcp__sellable__start_campaign_message_preparation
27
- - mcp__sellable__start_campaign
28
27
  - mcp__sellable__cancel_campaign_message_preparation
29
28
  - mcp__sellable__import_leads
30
29
  - mcp__sellable__wait_for_lead_list_ready
@@ -131,16 +130,11 @@ the active workspace. Without `--yolo`, if Christian did not name senders, ask
131
130
  which eligible enrolled senders to refill before choosing campaigns or mutating.
132
131
 
133
132
  `--yolo` only covers the exact sender set, per-sender target campaigns, caps,
134
- approval mode, and side effects in the packet. It may authorize `start_campaign`
135
- only for selected `PAUSED`, dashboard-active, campaign-backed sequence refill
136
- targets when the rendered packet names the exact campaign ids and start side
137
- effect. Starting a paused campaign can let the product scheduler schedule/send
138
- approved eligible sequence actions, so include that expected side effect in the
139
- packet. It does not authorize starting unrelated, archived, completed, draft, or
140
- direct campaigns, separate launch/send actions, archive or delete cleanup,
141
- direct scheduler writes, sender reassignment, or campaigns outside those
142
- selected for the eligible sender set. Stop and re-plan if the route, sender set,
143
- ids, caps, blockers, or side-effect class drift before mutation.
133
+ approval mode, and side effects in the packet. It does not authorize
134
+ launch/start, sending, archive or delete cleanup, direct scheduler writes, sender
135
+ reassignment, or campaigns outside those selected for the eligible sender set.
136
+ Stop and re-plan if the route, sender set, ids, caps, blockers, or side-effect
137
+ class drift before mutation.
144
138
 
145
139
  In `--yolo`, the default two-day fill horizon is two send days unless
146
140
  `--until`/`untilDate` is provided. If an until date is provided, compute bounded
@@ -15,7 +15,6 @@ allowed-tools:
15
15
  - mcp__sellable__get_provider_prompt
16
16
  - mcp__sellable__get_campaign_message_preparation_status
17
17
  - mcp__sellable__start_campaign_message_preparation
18
- - mcp__sellable__start_campaign
19
18
  - mcp__sellable__cancel_campaign_message_preparation
20
19
  - mcp__sellable__import_leads
21
20
  - mcp__sellable__wait_for_lead_list_ready
@@ -119,10 +118,9 @@ Use the refill-state response as the current facts receipt:
119
118
  - `freshness.stateHash` and exact campaign/table/workspace ids.
120
119
 
121
120
  Empty or unsafe states stop with the blocker: no fillable target, missing or deleted campaign,
122
- missing table, archived/completed campaign, paused campaign without an explicit
123
- selected-start packet, zero sender capacity, zero source candidates, zero viable
124
- rows, no approved/preparable rows, active prep job, awaiting scheduler, or
125
- unsupported direct campaign type.
121
+ missing table, paused/archive campaign, zero sender capacity, zero source candidates,
122
+ zero viable rows, no approved/preparable rows, active prep job, awaiting
123
+ scheduler, or unsupported direct campaign type.
126
124
 
127
125
  ## Regular Campaign Decision
128
126
 
@@ -302,27 +300,7 @@ Approval mode:
302
300
  - default is `approvalMode:"mark_ready"`, not approve;
303
301
  - use `approvalMode:"approve"` only when the user explicitly asks to approve
304
302
  messages or schedule sends and has approved the exact bounded cohort;
305
- - `start_campaign` is allowed only as a bounded start/resume step for a
306
- selected `PAUSED`, dashboard-active, campaign-backed sequence refill target;
307
- - never launch/start unrelated, archived, completed, draft, direct, or
308
- non-selected campaigns from refill.
309
-
310
- Paused campaign start discipline:
311
-
312
- - `PAUSED`, dashboard-active campaign-backed sequence campaigns are existing
313
- refill targets, not archived inventory.
314
- - If the selected refill target is `PAUSED` and has healthy senders, sequence,
315
- source/list, and ready/preparable rows or a bounded source/prep packet, the
316
- final packet may include `start_campaign` when starting is needed for the
317
- scheduler to schedule/send approved eligible rows.
318
- - In non-yolo mode, the `Accept` choice must say that starting the paused
319
- campaign can let the product scheduler schedule/send approved eligible
320
- sequence actions.
321
- - In `--yolo`, `start_campaign` is auto-accepted only for the exact selected
322
- paused campaign ids, sender scope, caps, approval mode, and start side effect
323
- named in the packet after the final reread.
324
- - Do not start if the campaign is archived, completed, draft, direct, lacks a
325
- sequence/senders/source, has no viable row path, or state drifts.
303
+ - never launch/start a campaign from refill.
326
304
 
327
305
  Before prep or approval mutation, reread `get_campaign_refill_state` and compare
328
306
  `freshness.stateHash`, campaign id, table id, workspace id, source id, and caps.
@@ -368,15 +346,13 @@ same refill request, do not ask the `Accept` / `Decline` question. Instead:
368
346
  packet;
369
347
  4. execute only the exact packet.
370
348
 
371
- `--yolo` authorizes `start_campaign` only for selected `PAUSED` refill targets
372
- named in the exact packet. It never authorizes starting unrelated, archived,
373
- completed, draft, or direct campaigns, separate launch/send actions,
374
- archive/delete cleanup, raw scheduler writes, sender reassignment, extra senders
375
- beyond the eligible sender set, or higher caps than the packet named. In
376
- sender-scoped `--yolo`, a bounded packet containing all eligible enrolled
377
- senders and at most one best campaign per sender is covered; arbitrary expanded
378
- campaign sets are not. If any state or scope drifts, stop and re-plan instead of
379
- auto-accepting the changed action.
349
+ `--yolo` never authorizes launch/start, sending, archive/delete cleanup, raw
350
+ scheduler writes, sender reassignment, unrelated campaigns, extra senders beyond
351
+ the eligible sender set, or higher caps than the packet named. In sender-scoped
352
+ `--yolo`, a bounded packet containing all eligible enrolled senders and at most
353
+ one best campaign per sender is covered; arbitrary expanded campaign sets are
354
+ not. If any state or scope drifts, stop and re-plan instead of auto-accepting the
355
+ changed action.
380
356
  Short form: all eligible enrolled senders are covered by sender-scoped `--yolo`; arbitrary expanded campaign sets are not.
381
357
  Short form: direct scheduler writes are not covered by `--yolo`.
382
358
  Short form: stop and re-plan instead of auto-accepting the changed action.
@@ -437,9 +413,7 @@ the current source or ask for more research instead of walking the ladder.
437
413
 
438
414
  ## Hard Safety Rules
439
415
 
440
- - Never call launch/start tools except `start_campaign` for an exact selected
441
- `PAUSED`, dashboard-active, campaign-backed sequence refill target in the
442
- rendered packet.
416
+ - Never call start or launch tools.
443
417
  - Never raw-write `scheduledFor`, `scheduledAt`, scheduled status, or sender
444
418
  assignment fields.
445
419
  - Never expose internal direct campaign types as an operator refill path.
@@ -451,8 +425,8 @@ the current source or ask for more research instead of walking the ladder.
451
425
  - In interactive Codex or Claude Code, that explicit approval must be collected
452
426
  through the host-native `Accept` / `Decline` question gate.
453
427
  - `--yolo` in the current refill request is explicit auto-accept for the
454
- rendered bounded refill packet only; it does not loosen the unrelated-campaign
455
- start/send, scheduler-write, archive/delete, or drift rules above.
428
+ rendered bounded refill packet only; it does not loosen the launch/send,
429
+ scheduler-write, archive/delete, or drift rules above.
456
430
 
457
431
  ## Report
458
432
 
@@ -468,5 +442,4 @@ Report in campaign-name-first language:
468
442
  freshness hash used.
469
443
 
470
444
  Keep ids visible but secondary: show them under "Exact target" or "Proof", not
471
- as the main decision text. Say explicitly whether a selected paused campaign was
472
- started; otherwise say nothing was started and nothing was sent.
445
+ as the main decision text. Say explicitly: nothing was launched and nothing was sent.